About POPIA
The Protection of Personal Information Act, 2013 (Act No. 4 of 2013), commonly known as POPIA or the POPI Act, is South Africa's data protection law. It regulates how organisations collect, process, store, and share personal information. POPIA came into full effect on 1 July 2021.
Joblee (Pty) Ltd is fully committed to complying with POPIA and protecting the personal information of every user on our platform.
Our Commitment
As a responsible party under POPIA, Joblee undertakes to:
- Process personal information lawfully, in a reasonable manner, and only for the purposes for which it was collected.
- Collect only the minimum personal information necessary to provide our services.
- Keep personal information accurate, complete, and up to date.
- Implement appropriate technical and organisational measures to safeguard personal information.
- Not retain personal information longer than is necessary for the purpose it was collected.
- Respect and facilitate the rights of data subjects as outlined below.
POPIA Conditions for Lawful Processing
POPIA sets out eight conditions for the lawful processing of personal information. Here is how Joblee complies with each:
1. Accountability
Joblee has appointed an Information Officer responsible for ensuring compliance with POPIA. All staff with access to personal data receive regular training.
2. Processing Limitation
We only collect personal information with your consent or where required to fulfil our contract with you. We do not process data beyond what is necessary.
3. Purpose Specification
Personal information is collected for specific, explicitly defined purposes: account creation, identity verification, job matching, payment processing, and platform improvement.
4. Further Processing Limitation
We do not process personal information for purposes incompatible with the original collection purpose. We will never sell your data to third parties.
5. Information Quality
We take reasonable steps to ensure personal information is complete, accurate, and not misleading. Users can update their information at any time through the app.
6. Openness
This page, along with our Privacy Policy, documents what information we collect, why, and how it is used. We are transparent about our data practices.
7. Security Safeguards
We implement encryption (TLS in transit, AES-256 at rest), access controls, regular security audits, and secure third-party payment processing. We conduct regular vulnerability assessments.
8. Data Subject Participation
You have the right to access, correct, or delete your personal information. See "Your Rights" below for details on how to exercise these rights.
Your Rights Under POPIA
As a data subject, you have the right to:
- Access — request confirmation of whether we hold your personal information and obtain a copy.
- Correction — request that inaccurate or incomplete personal information be corrected.
- Deletion — request deletion of your personal information where it is no longer necessary or where you withdraw consent.
- Objection — object to the processing of your personal information on reasonable grounds.
- Complaint — lodge a complaint with the Information Regulator if you believe your rights have been infringed.
How to Exercise Your Rights
Submit a request to our Information Officer by emailing privacy@joblee.co.za with the subject line "POPIA Request". Include:
- Your full name and email address registered on Joblee.
- A description of your request (access, correction, deletion, or objection).
- Proof of identity (copy of your South African ID or passport).
We will acknowledge your request within 5 business days and respond fully within 30 days, as required by POPIA.
Special Personal Information
Joblee processes South African ID numbers solely for the purpose of worker identity verification and criminal background checks. This processing is done with explicit consent and is necessary to ensure user safety. ID numbers are stored securely and are never shared with other users.
Data Breach Protocol
In the event of a data breach that compromises your personal information, Joblee will:
- Notify the Information Regulator as soon as reasonably possible.
- Notify affected data subjects without unreasonable delay.
- Provide details of the breach, potential consequences, and measures taken.
- Take immediate steps to mitigate any harm.
Information Officer
Joblee's designated Information Officer can be reached at:
- Email: privacy@joblee.co.za
- Website: joblee.co.za
Information Regulator (South Africa)
If you are not satisfied with how we handle your personal information, you may lodge a complaint with:
- The Information Regulator
- Email: enquiries@inforegulator.org.za
- Website: inforegulator.org.za